Unscored CVE-2023-45352 EUVD-2023-49645GHSA-8986-mwg7-j7jc

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary c…

Published Oct 9, 2023 · Updated Sep 19, 2024 · Assigned by mitre

Description

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path traversal vulnerability allowing write access outside the intended folders. This is also known as OCMP-6592.

Advisories 1

WID-SEC-2023-1619 Unify OpenScape Common Management Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 8, 2023

References

https://networks.unify.com/security/advisories/OBSO-2306-02.pdf
https://www.news.de/technik/857003738/unify-openscape-common-management-platform-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-update-zu-bekannten-schwachstellen-und-sicherheitsluecken-vom-03-07-2023/1/